Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: /xFvhgaK1I0NRBby38IpNpfC0GB5tMgTFc4kx3tg6iA=
Subject key identifier: BE:22:85:E4:26:49:9B:8B:9B:1B:17:66:48:B3:78:00:60:39:50:62
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 0198481B68B43E6E97E773D0F646A226F18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 11CE
Signing time: Sat 26 Jul 2025 19:00:12 +0000
Manifest this update: Sat 26 Jul 2025 19:00:12 +0000
Manifest next update: Sun 27 Jul 2025 19:00:12 +0000
Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: 3njMnVOPaneRqCar0BrQNOw2ZB16M/xxNCOZmliEMb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:68:b4:3e:6e:97:e7:73:d0:f6:46:a2:26:f1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Jul 26 19:00:12 2025 GMT
Not After : Jul 27 19:00:12 2025 GMT
Subject: CN=be2285e426499b8b9b1b176648b3780060395062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:8e:73:64:a0:90:c9:dc:14:33:35:08:56:
66:66:03:c9:3d:2e:53:a9:45:07:c1:e4:ec:0a:d0:
a8:e4:89:2e:79:ab:9f:d7:b6:fb:1b:46:b4:2a:f6:
17:db:a3:87:18:a5:19:1f:0e:dd:fc:3c:76:42:80:
55:19:82:1a:1c:8d:65:db:fe:33:ef:f8:0c:17:16:
85:b9:15:cf:71:97:ee:70:96:88:a0:f9:fd:7b:df:
61:72:8b:a8:ec:45:9d:a4:fb:36:5e:62:ca:4a:6c:
2a:e4:d5:f0:1f:52:fd:ed:6d:27:ee:71:ad:78:f9:
fd:b2:9a:a6:bf:0d:6f:06:37:5c:cc:d5:c4:39:49:
0e:d0:e8:42:d4:89:6c:6b:5e:7c:b4:b5:72:57:15:
65:f6:e6:cf:9c:d3:27:66:a6:77:1d:3e:47:01:e8:
27:53:9a:b1:7e:57:ea:03:f4:c7:e6:72:de:09:0b:
58:31:ef:e9:36:d6:8e:fb:ac:74:ac:d0:d5:3d:ca:
cc:35:b7:84:c6:ba:6a:8b:8b:c2:dd:02:39:dc:1e:
fb:80:83:25:16:24:f1:33:46:a9:ef:20:fa:11:6b:
56:76:d9:dc:0b:65:5a:ad:a0:49:b3:11:2d:92:3d:
37:14:5e:00:bb:6c:49:3f:86:2e:2a:b8:84:92:a8:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:85:E4:26:49:9B:8B:9B:1B:17:66:48:B3:78:00:60:39:50:62
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:16:c6:fd:53:ec:b7:04:d8:5f:55:76:ec:b9:05:a2:62:04:
be:77:69:c9:14:32:e7:62:46:e6:ae:3e:ce:6b:e5:96:36:ff:
18:c0:26:eb:d5:d0:03:8b:f4:35:36:4f:bd:f7:31:cb:ec:5e:
f3:9a:58:46:db:5f:dc:5b:5a:8f:6a:fd:fc:37:26:3f:6e:e0:
21:e3:36:cf:2d:e8:4e:63:9c:f6:cb:9b:86:1c:13:5c:25:25:
7d:aa:08:77:bc:2b:b4:e7:d8:03:d1:e5:8d:76:4a:d5:41:0f:
68:8a:ad:be:09:95:bb:a5:3b:1b:79:d4:7a:11:b7:3a:45:7b:
d6:bf:27:d5:81:f7:e5:40:bc:f7:c8:44:1c:26:1a:5b:b8:c0:
08:f8:31:2e:10:8a:16:43:08:88:bf:64:56:5f:0a:68:e1:fd:
2b:15:e2:8f:75:90:5a:05:bb:98:56:4d:b8:8a:6b:a2:f3:44:
d2:bb:54:8e:71:80:2a:dd:ac:87:c7:62:f6:29:d9:41:90:d2:
89:c6:ef:dc:e5:68:c6:46:16:de:91:80:e0:26:1e:9a:78:af:
eb:18:e9:d4:c2:e5:d6:32:56:9f:b0:ef:f5:70:72:c9:b3:a0:
3d:27:d0:e1:af:3f:09:45:ba:bb:19:af:48:80:bd:53:81:39:
4f:5e:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:58:20 2025 by rpki-client